Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-111654 | medium | 6.3 | No | FastBee through 2.1.0 contains an insecure direct object reference vulnerability that allows authenticated low-privilege users to access oth... | 2026-10-21 |
| CVE-2026-111649 | medium | 6.5 | No | Rocboss paopao-ce through 0.6.0-alpha.3 contains an insecure direct object reference vulnerability in DownloadAttachment that allows authent... | 2026-10-21 |
| CVE-2026-111644 | high | 7.3 | No | Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that allows unauthenticated attackers to access audit, dia... | 2026-10-21 |
| CVE-2026-111639 | high | 8.1 | No | bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/google_one_tap endpoint that allows remote attackers... | 2026-10-21 |
| CVE-2026-111634 | high | 8.1 | No | Helical Insight through 7.0.0 contains an sql injection vulnerability that allows authenticated viewers to inject SQL through unescaped repo... | 2026-10-21 |
| CVE-2026-111629 | medium | 4.3 | No | IoTSharp through 3.6.1 contains an insecure direct object reference vulnerability that allows any authenticated user to read other tenants'... | 2026-10-21 |
| CVE-2026-111624 | low | 3.7 | No | Umbraco CMS before 17.7.1 and 18.2.1 contains a missing authorization vulnerability that allows unauthenticated clients to connect to the ba... | 2026-10-21 |
| CVE-2026-111619 | medium | 6.5 | No | FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privilege users to inject SQL into ORDER BY cl... | 2026-10-21 |
| CVE-2026-111614 | medium | 6.5 | No | DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticat... | 2026-10-21 |
| CVE-2026-112914 | medium | 5.3 | No | filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock can restore a stale marker by name after movin... | 2026-10-21 |
| CVE-2026-101687 | high | 7.5 | No | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported... | 2026-10-21 |
| CVE-2026-101683 | high | 7.0 | No | Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are... | 2026-10-21 |
| CVE-2026-101681 | high | 7.0 | No | Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are... | 2026-10-21 |
| CVE-2026-101680 | high | 7.4 | No | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported... | 2026-10-21 |
| CVE-2026-101678 | medium | 4.3 | No | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Ea... | 2026-10-21 |
| CVE-2026-101677 | medium | 4.3 | No | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Ea... | 2026-10-21 |
| CVE-2026-101675 | medium | 6.7 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha... | 2026-10-21 |
| CVE-2026-101674 | medium | 6.7 | No | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha... | 2026-10-21 |
| CVE-2026-101673 | medium | 6.5 | No | Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations). Supported versio... | 2026-10-21 |
| CVE-2026-101671 | medium | 6.1 | No | Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component). Supported versions that are affe... | 2026-10-21 |